Timeline for Why there are still no keys longer than 256 bit?
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 29, 2022 at 3:39 | comment | added | forest | @poncho Hence "A multi-target attack is relevant". You need a lot of targets and a lot of computing power to pull that off, even when you can parallelize easily. | |
| Aug 29, 2022 at 2:11 | comment | added | poncho | Actually, I would posit that even if we had a multi-target attack, and quantum operations were as cheap as classical operations are currently, it would still be infeasible to attack. If we assumed the attacker had $2^{32}$ targets, then Grover's (without parallelization) would require circa $2^{112}$ cipher evaluations, which is still more than what we can do classically (and that's not taking into account that $2^{112}$ sequential operations is infeasible and adding parallelization would increase the total amount of computation | |
| Aug 29, 2022 at 1:03 | history | edited | forest | CC BY-SA 4.0 |
misc changes
|
| Aug 29, 2022 at 0:57 | history | answered | forest | CC BY-SA 4.0 |